CVE-2026-24089: Improper Validation of Syntactic Correctness of Input in Kernel
Memory corruption while processing fastboot commands with invalid input.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/abl/tianocore/edk2to a version that resolves this vulnerability.Fixed in SoCVersion:2026-06-05
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24089?
The severity of CVE-2026-24089 is rated high with a score of 7.2.
How do I fix CVE-2026-24089?
To fix CVE-2026-24089, apply the patch that has been made available by Qualcomm.
What type of vulnerability is CVE-2026-24089?
CVE-2026-24089 is an improper validation of syntactic correctness of input vulnerability leading to memory corruption.
Which Qualcomm firmware versions are affected by CVE-2026-24089?
CVE-2026-24089 affects multiple Qualcomm firmware versions including Ar8031, Ar8035, Cologne, Cq7790, Cq8725s, Qmp1000, Qmp2001, and Qpa1083bd.
What are the potential impacts of CVE-2026-24089?
The potential impacts of CVE-2026-24089 include memory corruption that could lead to denial of service or arbitrary code execution.